id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc,focuses
19330,Information disclosure in wp-app.php,Ov3rfly,,"/wp-app.php discloses the full url to admin-interface if AtomPub is disabled, line 285:
{{{
// check to see if AtomPub is enabled
if ( !get_option( 'enable_app' ) )
$this->forbidden( sprintf( __( 'AtomPub services are disabled on this site. An admin user can enable them at %s' ), admin_url('options-writing.php') ) );
}}}
Suggested fix: Do not print output of admin_url('options-writing.php')",defect (bug),closed,normal,,Security,3.2.1,normal,wontfix,close 2nd-opinion,,